Information Security Team Lead

Information Security Team Lead LocationLondon OfficeEmployment TypeFull timeLocation TypeHybridDepartmentEngineeringWhat is Flagstone?Flagstone is many things. An online savings platform, reinventing how individuals, businesses, and charities manage, protect, and grow their cash. A diverse group of people, bound by a collaborative spirit, and shared purpose. And lastly, a thriving, profitable business – where smart people do their best work.Each definition shares a common thread: our unique culture. It’s our pride and joy. And our competitive advantage.A feel for our culture:To revolutionise the savings market, we need to be at our best. But high performance takes more than talent – it takes a culture of kindness, respect, and growth.That’s why we’re building a diverse, inclusive community, where your voice is heard and valued. Where, with close support and room to develop, you can surpass even your own expectations. And be rewarded for it.We may not change the world, but we can change the world of financial technology. And all it takes is a winning mix of drive, talent, and empathy. Our culture celebrates all three.But enough about us. Let’s talk about you.Does this sound like you?You’re an experienced security leader who enjoys building capable and effective teams while embedding security into everyday technology and business processes. You’re comfortable balancing hands on input with coaching, strategy, and operational management.You can clearly explain the “why” behind security controls, work collaboratively across Technology, Risk, Compliance, and Product, and take a proactive approach to managing risk, incidents, and continuous improvement.What you’ll do:Lead, coach, and grow a team of security analysts, and build the function as we scale.Shape and deliver the Information Security strategy, keeping it aligned to business goals and regulatory expectations.Embed "secure by design" across technology and product delivery, so security is built in, not bolted on.Be responsible for security governance, risk management, and control effectiveness, driving them day to day.Run and continuously improve our ISMS as the backbone for our security controls and initiatives.Drive ongoing improvement of our security processes, tooling, and standards.Lead security incident response and post-incident reviews, turning lessons into stronger defences.Partner with stakeholders across the business to plan, prioritise, and resource security work.Own hiring, onboarding, and development within the security team. What you’ll bring: Proven Information Security experience in a regulated or complex environment (financial services / FCA exposure a strong plus).A track record of leading, coaching, and developing analysts.Strong leadership presence and the ability to influence across all levels, from engineers to executives, building buy-in for security without relying on authority alone.Demonstrable experience embedding AI governance, having defined and operationalised risk and control frameworks for the secure, responsible adoption of AI.Deep knowledge of security frameworks and security best practice (ISO 27001, NIST, OWASP, CIS).Strong command of security risk management, governance, and incident response.Cloud security expertise (Azure preferred), network security, and identity and access management (IAM), with fluency across modern tooling e.g. SIEM, EDR, DLP, IDP, IPS.Hands-on experience with vulnerability management, identifying, prioritising, and driving remediation across the estate.Strong communication skills, with the ability to translate complex security risk into clear, actionable terms for both technical and non-technical audiences.A proactive, improvement-focused mindset and excellent stakeholder collaboration.How we reward you:At Flagstone, the benefits extend beyond false gifts like “fruit and snacks”. Instead, we invest in your health, wealth, and professional development. Here’s a selection of our benefits:Hybrid working - Spend at...